A critical local privilege-escalation vulnerability in Parallels Desktop for Mac could allow an unprivileged local user to execute attacker-controlled code with root privileges, placing developer workstations and shared macOS systems at risk. Tracked as CVE-2026-90894 and dubbed “ParaShells” by JFrog researchers, the flaw affects the privileged prl_disp_service daemon, which Parallels Desktop uses to manage virtual […]
The post Parallels Desktop Flaw Lets Unprivileged Mac Users Gain Root Access appeared first on Cyber Security News.